PT-2026-81030

A cross-site scripting XSS vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter...

EUVD-2022-56022

A cross-site scripting XSS vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter...

PT-2026-80807

Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...

PT-2026-80806

Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...

CVE-2026-32556: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...

CVE-2026-66623: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...

CVE-2026-78282: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...

CVE-2026-34491: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This issue affects Metasys 14: before 14.1.5; Metasys 15: before 15.0.1...

CVE-2026-78290: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.6 versions...

CVE-2026-66599: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...

CVE-2026-28166: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Tourmaster = 5.4.9 versions...

CVE-2026-66610: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Urna = 2.6.2 versions...

CVE-2026-78414: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session toke...

PT-2026-80980

Name of the Vulnerable Software and Affected Versions Metasys versions prior to 14.1.5 Metasys versions prior to 15.0.1 Description Improper neutralization of input during web page generation allows Cross Site Scripting XSS, a condition where malicious scripts are injected into trusted websites...

CVE-2026-78187: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. The...

PT-2026-80833

Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...

PT-2026-80805

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

PT-2026-80828

Unauthenticated Cross Site Scripting XSS in Tourmaster = 5.4.9 versions...

PT-2026-81062

Unauthenticated Cross Site Scripting XSS in Stripe Payments = 2.1.2 versions...

PT-2026-81057

Name of the Vulnerable Software and Affected Versions Toolset Blocks versions 1.6.26 and earlier Description Unauthenticated Cross-Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Toolset Blocks to...